AppSec Analyst DAST
Core
Configure, run, and maintain DAST tools to identify and remediate vulnerabilities in running applications while embedding security into the SDLC.
Role type
Senior IC application security analyst (DAST)
Builds
Secure web applications and APIs by integrating automated security testing into CI/CD pipelines
Domain
Application security / Web security
Required skills
DAST tool configuration and automation, API security testing, OAuth2/JWT/SSO authentication, OWASP Top 10 knowledge, DevSecOps pipeline integration, secure coding guidance, vulnerability remediation, programming proficiency
Preferred skills
GWEB, OSWE, or Security certifications
Technologies
OWASP ZAP, Burp Suite, commercial scanners, CI/CD, DevSecOps, JWT, OAuth2, SSO
Responsibilities
Configure, run, and maintain DAST tools; Perform dynamic application security testing on applications; Identify and remediate vulnerabilities in running applications; Integrate DAST into CI/CD pipelines; Prepare detailed reports on DAST findings; Guide and train development teams in secure coding practices; Ensure application compliance with security policies and regulatory requirements
Seniority
Senior, hands-on IC
